Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-46664
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-07